Authentication · interview question
Why is HTML encoding important for preventing stored XSS attacks?
Multiple choiceMediumchapter-17-curatedpremiumauthenticationplaintext-passwords
Answer and explanation
Correct answer
B. It prevents malicious scripts from being executed by treating them as plain text.
Why
HTML encoding converts potentially harmful characters into their corresponding HTML entities, preventing the browser from executing them as code. This is crucial in preventing stored XSS attacks, where malicious scripts are injected into web pages.
Test yourself on Authentication
A free test with instant, explained results. No account needed.
More Authentication questions
- In the context of JWT, what is the primary purpose of the signature?
- How can a Java developer verify the signature of a JWT using HMAC SHA-256?
- How would you explain a significant consequence of using stateless JWT tokens for authentication in an interview?
- Which statement about JWT payloads is correct?
- Which statement best describes the use of CSRF tokens in web applications?
- Why is using BCrypt preferable over a fast hashing algorithm like SHA-256 for password hashing?